Update tls.md section Default SSL Certificate

Clarified this section
This commit is contained in:
Marco 2024-06-25 13:04:48 +02:00 committed by k8s-infra-cherrypick-robot
parent bdbbbf1673
commit 376ba9f13e

View file

@ -41,8 +41,9 @@ If this flag is not provided NGINX will use a self-signed certificate.
For instance, if you have a TLS secret `foo-tls` in the `default` namespace, For instance, if you have a TLS secret `foo-tls` in the `default` namespace,
add `--default-ssl-certificate=default/foo-tls` in the `nginx-controller` deployment. add `--default-ssl-certificate=default/foo-tls` in the `nginx-controller` deployment.
The default certificate will also be used for ingress `tls:` sections that do not If the `tls:` section is not set, NGINX will provide the default certificate but will not force HTTPS redirect.
have a `secretName` option.
On the other hand, if the `tls:` section is set - even without specifying a `secretName` option - NGINX will force HTTPS redirect.
To force redirects for Ingresses that do not specify a TLS-block at all, take a look at `force-ssl-redirect` in [ConfigMap][ConfigMap]. To force redirects for Ingresses that do not specify a TLS-block at all, take a look at `force-ssl-redirect` in [ConfigMap][ConfigMap].